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What is Claimed: 



1 1. A method of identifying the originator of a message transmitted 

2 between a client and a server system, said method comprising the steps of: 

3 modifying a message to be transmitted during a session between a client 

4 and a server system to Include a session identification flag and a session identifier 

5 corresponding to an originator of the session on the server system and allowing the 

6 originator of the session to be uniquely identified among originators of sessions on the 

7 server system; 

8 transmitting the message between the client and the server system; 

9 checking the transmitted message for the session identification flag; and 

10 reading the session identifier of the transmitted message to determine 

11 the originator of the message. 

1 2. The method according to claim 1, wherein the step of modifying 

2 the message comprises the step of re-computing a control portion of the message to 

3 reflect the inclusion of the session identification flag and the session Identifier. 

1 3. The method according to claim 2, further comprising the steps of: 

2 removing the session identification flag and the session Identifier from 

3 the transmitted message; and 

1 re-computing the control portion of the message to reflect the removal of 

2 the session identification flag and the session Identifier. 

1 4. The method according to claim 1, wherein the step of modifying 

2 the message comprises appending the session identification flag and the session 

3 Identifier at an end of the message, 

1 5. The method according to claim 1, wherein the step of modifying 

2 the message further comprises at least one of changing the session identifier for each 

3 communication or changing the session identifier at a predetermined interval. 

1 6. A method of identifying the originator of a communication packet 

2 transmitted between a client and a server in a client/server system, said method 

3 comprising the steps of: 

4 appending a session identifier and a security tag to the communication 

5 packet, the session identifier uniquely identifying the client in the client/server system; 

6 authenticating the session identifier using the security tag; and 
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7 if the appended session identifier is authenticated, determining the 

8 originator of the transnnitted connmunication packet based on the appended session 

9 identifier. 

1 7. The method according to claim 6, further comprising the step of: 

2 establishing a common security tag In the client and server, wherein the 

3 step of appending the session identifier Includes appending the common security tag to 

4 the communication packet to be transmitted between the client and the server such 

5 that a presence of the common security tag In the transmitted communication packet 

6 indicates that the session Identifier Is authenticated. 

1 8. The method according to claim 7, further comprising the steps of: 

2 if the appended session identifier in the transmitted communication 

3 packet is authenticated, processing the transmitted communication packet according to 

4 predetermined rules for transmitted communication packets with authenticated session 

5 Identifiers; and 

6 if the appended session identifier in the transmitted communication 

7 packet is not authenticated, processing the transmitted communication packet 

8 according to predetermined rules for transmitted communication packets without 

9 authenticated session identifiers. 

1 9. The method according to claim 8, wherein the step of appending 

2 the session identifier and the common security tag to the communication packet 

3 comprises the step of re-computing a control portion of the communication packet to 

4 be transmitted to reflect the inclusion of the common security tag and the session 

5 identifier, the method further comprising the steps of: 

6 removing the common security tag and the session Identifier from the 

7 transmitted communication packet; and 

8 re-computIng the control portion of the transmitted communication 

9 packet to reflect the removal of the common security tag and the session identifier. 

1 10. The method according to claim 9, further comprising the steps of: 

2 encrypting the communication packet to be transmitted after the step of 

3 appending the session identifier and the common security tag; and 

4 decrypting the transmitted communication packet prior to the steps of 

5 determining the originator of the transmitted communication packet, removing the 
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6 common security tag and the session identifier, and re-computing tlie control portion of 

7 the transmitted communication packet. 

1 11. The method according to claim 9, further comprising the steps of: 

2 encrypting the communication pacl<et to be transmitted prior to the step 

3 of appending the session identifier and the common security tag; and 

4 decrypting the transmitted communication paclcet after the step of re- 

5 computing the control portion of the transmitted communication packet. 

1 12. The method according to claim 7, further comprising the step of: 

2 setting a length of the common security tag greater than a 

3 predetermined length to reduce or substantially eliminate falsely authenticated session 

4 identifiers. 

1 13. The method according to claim 12, wherein the length of the 

2 security tag Is set to a length In the range of about 8 to 64 bits long. 

1 14. A method of identifying an originator of all communication packets 

2 transmitted between a client and a server system using an application program, the 

3 originator having an actual network address, said method comprising the steps of: 

4 modifying each of the communication packets to be transmitted between 

5 a client and a server system to include information identifying the originator of a 

6 respective communication packet without regard for the application program being 

7 used or an apparent network address that Is a network address that replaces the actual 

8 network address of the originator during transmission of a respective communication 

9 packet; 

10 transmitting each modified communication packet between the client and 

11 the server system; and 

12 determining the originator of each transmitted communication packet 

13 based on the information identifying the originator therein. 

1 15. A computer system for identifying the originator of a message, 

2 comprising: 

3 a server; and 

4 a client operationally connected to the server, the client and server being 

5 configured to transmit one or more messages therebetween during a session, each of 

6 the messages to be transmitted being modified by one of the client or the server to 
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7 include a session identification flag and a session identifier, the client and server being 

8 further configured such that: 

9 the modified message Is transmitted to the remaining one of the client 

10 and the server; 

11 the session identification flag of the transmitted message Is checked by 

12 the remaining one of the client and the server to validate the session identifier; and 

13 if the session Identifier is validated, the session identifier of the 

14 transmitted message is read to determine the originator of the transmitted message, 

15 the session identifier corresponding to an originator of a session on the server system 

16 and allowing the originator of the session to be uniquely Identified among originators of 

17 sessions on the server system. 

1 16. The computer system according to claim 15, further comprising a 

2 network gateway disposed operationally between the client and server and providing 

3 access to the server such that the server Is remotely accessible by the client. 

1 17. The computer system according to claim 16, further comprising: 

2 an encrypting unit disposed on one side of the network gateway to 

3 encrypt the message to be transmitted. 

1 18. The computer system according to claim 17, further comprising: 

2 a decrypting unit disposed on another side of the network gateway to 

3 decrypt the transmitted message. 

1 19. The computer system according to claim 18, wherein the message 

2 is processed sequentially such that either the message to be transmitted is encrypted 

3 by the encrypting unit and then modified and the transmitted message Is read and then 

4 decrypted by the decrypting unit or the message to be transmitted is modified and then 

5 encrypted by the encrypting unit and the transmitted message Is decrypted by the 

6 decrypting unit and then read. 

1 20. The computer system according to claim 16, wherein the network 

2 gateway includes a database to validate the session identifier by checking a user 

3 identifier, if the session identifier Is not valid, the computer system forces the user to 

4 log in prior to accessing the server and if the session Identifier is valid, the computer 

5 system retrieves an associated user Identifier and the server processes the transmitted 

6 message. 
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1 21. A computer readable carrier including computer program 

2 instructions which cause a computer system including at least a client and a server to 

3 implement a method of identifying the originator of a message transmitted between the 

4 client and the server, said method comprising the steps of: 

5 modifying a message to be transmitted during a session between the 

6 client and the server to include a session identification flag and a session identifier, the 

7 session identifier being assigned corresponding to the originator of the session on the 

8 server system and allowing the originator of the session to be uniquely identified 

9 among originators of sessions on the server system; 

10 re-computing a control portion of the message to reflect the Inclusion of 

11 the session Identification flag and the session identifier; 

12 transmitting the message between the client and the server; 

13 checking the transmitted message for the session Identification flag; 

14 reading the session identifier of the transmitted message to determine 

15 the originator of the message; 

16 removing the session identification flag and the session identifier from 

17 the transmitted message; and 

18 re-computIng the control portion of the message to reflect the removal of 

19 the session Identification flag and the session identifier. 



